docker-compose.azure.yml

version: '3.4'

# Uses let's encrypt SSL with a reverse proxy to expose web
# apps on a single host. Uses subdomains for different
# user-facing services.

services:

  web.ui:
    environment:
      - VIRTUAL_HOST=${GPP_EXTERNAL_DNS_NAME_OR_IP}
      - VIRTUAL_PORT=80
      - LETSENCRYPT_HOST=${GPP_EXTERNAL_DNS_NAME_OR_IP}
      - LETSENCRYPT_EMAIL=${LETSENCRYPT_EMAIL}
      - ASPNETCORE_ENVIRONMENT=${DOTNET_ENV}
      - ASPNETCORE_URLS=http://0.0.0.0:80
      - IdentityUrl=https://identity.${GPP_EXTERNAL_DNS_NAME_OR_IP}:443
      - CallBackUrl=https://${GPP_EXTERNAL_DNS_NAME_OR_IP}:443
      - ASPNETCORE_FORWARDEDHEADERS_ENABLED=true
    restart: always

  web.api:
    environment:
      - VIRTUAL_HOST=api.${GPP_EXTERNAL_DNS_NAME_OR_IP}
      - VIRTUAL_PORT=80
      - LETSENCRYPT_HOST=api.${GPP_EXTERNAL_DNS_NAME_OR_IP}
      - LETSENCRYPT_EMAIL=${LETSENCRYPT_EMAIL}
      - ASPNETCORE_ENVIRONMENT=${DOTNET_ENV}
      - ASPNETCORE_URLS=http://0.0.0.0:80
    restart: always

  identity.api:
    environment:
      - VIRTUAL_HOST=identity.${GPP_EXTERNAL_DNS_NAME_OR_IP}
      - VIRTUAL_PORT=80
      - LETSENCRYPT_HOST=identity.${GPP_EXTERNAL_DNS_NAME_OR_IP}
      - LETSENCRYPT_EMAIL=${LETSENCRYPT_EMAIL}
      - ConnectionStrings__UserConnection=Server=tcp:${USER_SQL_HOST},1433;Initial Catalog=${USER_SQL_DB};Persist Security Info=False;User ID=${USER_SQL_USER};Password=${USER_SQL_PASSWORD};MultipleActiveResultSets=False;Encrypt=True;TrustServerCertificate=False;Connection Timeout=30;
      - ASPNETCORE_ENVIRONMENT=${DOTNET_ENV}
      - ASPNETCORE_URLS=http://0.0.0.0:80
      - WebsiteUrl=https://${GPP_EXTERNAL_DNS_NAME_OR_IP}
    restart: on-failure:10

  webapigw:
    ports:
      - "5202:80"
    restart: always

  core.api:
    environment:
      - ASPNETCORE_ENVIRONMENT=${DOTNET_ENV}
    restart: always

  core.eventstore:
    environment:
      - VIRTUAL_HOST=eventstore.${GPP_EXTERNAL_DNS_NAME_OR_IP}
      - VIRTUAL_PORT=2113
      - LETSENCRYPT_HOST=eventstore.${GPP_EXTERNAL_DNS_NAME_OR_IP}
      - LETSENCRYPT_EMAIL=${LETSENCRYPT_EMAIL}
      - EVENTSTORE_DEV=false
      - EVENTSTORE_DB=/var/lib/eventstore-db
      - EVENTSTORE_INDEX=/var/lib/eventstore-index
      - EVENTSTORE_LOG=/var/log/eventstore
      - EVENTSTORE_STATS_PERIOD_SEC=86400
    restart: always
    volumes:
      - /data/eventstore-db:/var/lib/eventstore-db
      - /data/eventstore-index:/var/lib/eventstore-index
      - /data/eventstore-logs:/var/log/eventstore

  core.readmodel:
    command: redis-server --appendonly yes
    volumes:
      - /data/redis:/data
    restart: always

  nginx-proxy:
    image: nginxproxy/nginx-proxy
    container_name: nginx-proxy
    depends_on:
      - identity.api
      - web.api
      - web.ui
      - core.eventstore
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - conf:/etc/nginx/conf.d
      - vhost:/etc/nginx/vhost.d
      - html:/usr/share/nginx/html
      - certs:/etc/nginx/certs:ro
      - /var/run/docker.sock:/tmp/docker.sock:ro
      # Contains settings to increase header size allowed (i.e., from identity-server):
      - ./proxy.conf:/etc/nginx/proxy.conf:ro 
    restart: always

  acme-companion:
    image: nginxproxy/acme-companion
    container_name: nginx-proxy-acme
    depends_on:
      - nginx-proxy
    volumes:
      - conf:/etc/nginx/conf.d
      - vhost:/etc/nginx/vhost.d
      - html:/usr/share/nginx/html
      - certs:/etc/nginx/certs:rw
      - acme:/etc/acme.sh
      - /var/run/docker.sock:/var/run/docker.sock:ro
    environment:
      - NGINX_PROXY_CONTAINER=nginx-proxy
    restart: always

volumes:
  conf:
  vhost:
  html:
  certs:
  acme: